Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
File: 8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft (raw, json)
Hash identifier: XorRpJ3GwyioC64JfA884DArOnyEFlyLRF02d+Yu7RI=
Subject key identifier: 2A:38:07:5B:A0:21:04:91:A2:38:9B:A1:FD:6A:DF:E6:E8:A9:71:D9
Authority key identifier: F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5
Certificate issuer: /CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5
Certificate serial: 019873E3950E78A382FEA5B00F1D8994E46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
Manifest number: FD
Signing time: Mon 04 Aug 2025 07:02:31 +0000
Manifest this update: Mon 04 Aug 2025 07:02:31 +0000
Manifest next update: Tue 05 Aug 2025 07:02:31 +0000
Files and hashes: 1: 8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl (hash: jNaKkoJkzMF7zKTyH8VLL8cPLJskRsyfciHbU8Y4O8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:95:0e:78:a3:82:fe:a5:b0:0f:1d:89:94:e4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5
Validity
Not Before: Aug 4 07:02:31 2025 GMT
Not After : Aug 5 07:02:31 2025 GMT
Subject: CN=2a38075ba0210491a2389ba1fd6adfe6e8a971d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:db:0a:51:ad:a9:77:2e:25:3c:97:0a:5e:
3f:10:42:86:e9:13:e0:b8:e3:ee:fd:ff:bb:34:3f:
b2:98:01:5a:ac:34:cf:f2:58:78:20:5c:e8:a4:1d:
45:cb:e1:42:32:1e:14:35:16:02:dd:47:3c:50:13:
d4:13:fd:89:59:f9:19:14:45:26:10:af:0f:d7:7c:
77:6e:72:3a:cb:10:77:d8:a0:91:ba:1e:66:0d:86:
99:a9:ba:b8:b3:a5:50:f3:ef:c0:d9:cf:bf:05:dc:
60:f3:13:39:e6:33:1f:10:4f:94:f1:72:2e:f5:de:
0b:0f:ed:5d:3b:93:9b:c2:4e:22:89:49:2a:1b:42:
9e:22:6c:9b:0f:02:1b:ca:5f:9f:41:c6:c8:9f:db:
f9:ee:eb:f6:cb:69:c6:8b:4f:33:04:2d:da:a9:81:
53:2b:89:a8:bb:69:e3:69:8e:e8:28:36:04:75:3e:
49:06:7e:27:24:f0:bd:a1:57:56:6c:35:a9:c8:c4:
59:e6:06:06:0d:b8:68:57:99:d4:cc:ce:a1:25:c6:
17:20:39:2d:2f:60:e8:ea:97:22:99:11:b7:89:c3:
e6:1a:6f:bc:be:d1:49:45:ef:a8:c2:75:d0:ae:39:
1d:d5:22:7d:74:b1:1e:45:f4:b3:10:86:5e:2f:64:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:38:07:5B:A0:21:04:91:A2:38:9B:A1:FD:6A:DF:E6:E8:A9:71:D9
X509v3 Authority Key Identifier:
keyid:F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:87:6f:53:f5:bf:4e:44:3a:16:6e:56:94:d5:a8:f2:3c:6d:
3d:f2:dd:68:bc:88:fd:06:a1:85:a3:f1:d4:bf:2a:20:ff:95:
d5:d7:c4:5e:b1:9e:eb:e8:80:75:6c:20:32:17:54:83:15:19:
af:d4:cb:2b:b7:04:76:1e:9c:9e:87:86:32:c1:3f:e8:11:2e:
19:5d:55:00:0e:24:4c:ee:2b:b2:6e:d5:79:a8:6a:51:93:8b:
05:17:8f:3b:91:c1:bd:10:38:46:84:0f:d3:98:c0:f2:b6:67:
93:cd:d9:bc:d2:30:96:b7:a3:7f:db:90:af:50:92:69:96:e5:
06:69:1d:9d:a2:81:a1:4f:ff:47:76:12:a1:3c:cd:84:be:94:
0c:67:94:dd:36:7a:b6:43:b7:47:92:3c:bd:3c:ca:9b:83:b8:
19:b3:08:2e:21:c5:68:f7:18:cd:55:ec:d6:02:08:f8:8e:23:
45:cc:a3:ef:7b:d7:1d:7d:68:b4:15:1c:d9:9e:b2:06:2f:95:
a5:08:fd:0d:df:b2:52:ef:b3:7b:2a:e4:2e:2a:60:42:b7:3a:
4a:68:52:8d:2c:24:65:b8:ff:c0:84:c1:73:fb:5b:df:a4:92:
28:41:f4:48:1e:09:e3:e4:3a:df:53:0e:44:99:62:eb:75:63:
51:cd:85:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:28 2025 by rpki-client